IN THE CLAIMS 

Please amend the claims to read as follows : 
Listing of Claims 

1 . (Currently Amended) A data processing system for 
executing at least one program to which access by a user is 
controlled by the provision of credentials assigned to said user, 
said system including: 

[[-]] at least one terminal including data processing means 
for executing at least part of said program, 

[[-]] first memory means associated with said program for 
storing at least first credentials specific to said user, and 

[[-]] access control means for authorizing access to said 
program in response to an identified a match between said first 
credentials stored in said first memory means and second 
credentials applied via said terminal to said program, 

[[-]] at least one security device personal to said usery 
that is associated with said terminal and includin g includes 
second memory means for secure storage of said second 
credentials , 

[[-]] said terminal including at least some of a credentials 
management means (CMP) includin g that comprises : 

[[•]] m e ans f or reading and transmitting credentials 

means for reading t o r e ad said second credentials stored in 
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said second memory means and transmit th em transmitting the 
read second credentials to said access control means in 
response to presentation of a request to access said 
program, and 

' [[•]] credentials updating means for selectively 

commanding the generation and loading^ into said first and 
second memory means x of new credentials replacing , in 
response to the identified match of said first and second 
credentials , said first and second credentials previously 
stored. 

2. (Currently Amended) A system according to claim 1, 
wherein said access control means authorize access to said 
program in response to id e ntity the identified match of said 
first and second credentials . 

3. (Currently Amended) A system according to claim 1, 
whereinjL 

said second memory means store a first identification code 
of said user, 

said terminal includes interface means for applying a second 
identification code to said personal security device^ and 
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said personal security device comprises identification code 
validation means, and 

access to said personal security device b e in g is authorized 
by said validation means in response to id e ntity the identified 
match of said first and second identification codes. 

4. (Currently Amended) A system according to claim 1, 
wherein said credentials updating means comprises generating 
means t o ge n e rat e for generating said new credentials 
automatically and t o transmit th e m transmitting the generated new 
credentials directly to said first and second memory means 
without communicating said new credentials to said user. 

5. (Original) A system according to claim 1, wherein said 
credentials management means are software means forming part of 
said program. 

6. (Currently Amended) A system according to claim 5, 
wherein said credentials updating means comprises generating 
means t o ge n e rat e for generating and l o ad loading said new 
credentials into said first and second memory means consecutively 
upon authorization of access by said access control means. 
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7. (Currently Amended) A system according to claim 6, 
wherein said credentials management means include^ 

dating means for dating and loading into at least one of 
said first and second memory means the date at which said 
credentials are generated^, and 

inhibitor means for authorizing generation of said new 
credentials by said credentials updating means only after a 
particular time has elapsed since the generation of said 
credentials stored in said first and second memory means. 

8. (Currently Amended) A system according to claims 1, 
wherein said credentials management means are software means that 
are independent of said program. 

9. (Currently Amended) A system according to claim 3, 
wherein^ 

said credentials management means are software means 
independent of said program^ and 

said credentials updating means comprises generating means 
t o ge n e rat e for generating and l o ad loading said new credentials 
into said first and second memory means consecutively upon 
validation of said identification code by said validation means. 
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10 . (Currently Amended) A system according to e ith e r claim 
9 , whereinj. 

said credentials management means include dating means for 
dating and loading into at least one of said first and second 
memory means the date at which said credentials are generated^ 
and 

inhibitor means for authorizing generation of said new 
credentials by said credentials updating means only after a 
particular time has elapsed since the generation of said 
credentials stored in said first and second memory means . 

11. (Currently Amended) A system according to claim 1, 
wherein said program is stored and executed wholly within said 
terminal for local execution o f said a pp licati o n . 

12 . (Currently Amended) A system according to claim 1 , 
whereinj. 

said system includes at least one server and transmission 
means for transmitting data between said terminal and said 
server, 

said program is stored and executed partly in said terminal 
and partly in said server, and 

said first memory means are associated with said server. 



